Cisco ASR 1000 Series Aggregation Services Routers

Ordering Guide Cisco ASR 1000 Series Aggregation Services Routers Ordering Guide September 2014 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 70

Contents Overview... 3 Getting Started... 3 Cisco ASR 1000 Series High-Level Overview and Part Numbers... 4 Cisco ASR 1000 Series Router... 7 Chassis... 7 Embedded Services Processor... 8 Route Processor... 9 Route Processor Types... 10 Route Processor Memory and Storage... 10 Route Processor Redundancy... 11 USB Flash Memory Token... 11 Ports and Media Interface Modules: SIP and SPA... 11 Power Supplies... 12 Accessories... 12 Ordering Cisco ASR 1000 Series Router : Cisco ASR 1000 RP1 and RP2... 13 Ordering Cisco ASR 1000 Series Router : Cisco ASR 1001, ASR 1001-X, and ASR 1002-X... 15 Ordering Cisco ASR 1000 Series Router Feature Licenses... 17 Broadband and Service Provider Wi-Fi Service... 19 Ordering Cisco ASR 1001, ASR 1001-X, and ASR 1002-X Series Feature Licenses... 22 Ordering Cisco ASR 1000 Series Bundles... 23 Configuration Examples... 24 Example 1: Cisco ASR 1000 Series Router for Application Experience (ASR1000-AX)... 24 Example 2: Cisco ASR 1000 Series Router as a Broadband Aggregation Router... 27 Example 3: Cisco ASR 1000 Series Router as a Quadruple-Play Edge Router... 38 Example 4: Cisco ASR 1000 Series Router as an LNS Router with Per-Subscriber Firewall... 39 Example 5: Cisco ASR 1000 Series Router as High-End Customer Premises Equipment... 40 Example 6: Cisco ASR 1000 Series Router as a Provider-Edge Router... 41 Example 7: Cisco ASR 1000 Series Router as a Route Reflector... 42 Example 8: Cisco ASR 1000 Series Router as a Secure Headend Router... 43 Example 9: Cisco ASR 1000 Series Router as an Internet Gateway Router... 43 Example 10.1: Cisco ASR 1000 Series Router as an SBC in a Centralized SIP Trunking Data Center Deployment... 44 Example 10.2: Cisco ASR 1000 Series Router as an SBC in an Intercompany Telepresence Solution Deployed in a Service Provider Data Center... 45 Example 11: Cisco ASR 1000 Series Router as a Stateful NAT64 Translator (Cloud Provider Edge)... 46 Example 12: Cisco ASR 1000 Series Router as a Carrier-Grade NAT Router... 46 Example 13: Cisco ASR 1000 Series Router as a Secure WAN Router... 47 Ordering Information... 48 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 70

Overview This guide provides an overview and guidance for ordering and configuring the Cisco ASR 1000 Series Aggregation Services Routers with their respective hardware components, Cisco IOS XE, and feature licenses. It first addresses ordering of individual components, including hardware, software, and licenses. Secondly, there are several ordering examples, as well as a step-by-step walk-through of the Cisco Dynamic Configuration Tool, and of a typical deployment, including bundles. Finally, a list of part numbers, also referred to as product identifiers (PIDs), is included. The Cisco ASR 1000 Series consists of seven platforms: Cisco ASR 1001 Router Cisco ASR 1001-X Router Cisco ASR 1002 Router Cisco ASR 1002-X Router Cisco ASR 1004 Router Cisco ASR 1006 Router Cisco ASR 1013 Router The Cisco ASR 1000 Series delivers multiple services embedded in the Cisco QuantumFlow Processor (QFP) at wire speeds from 2.5 to 200 Gbps. The services supported on the Cisco QFP include security services (for example, up to 78G encryption throughput and up to 6M firewall sessions), quality of service (QoS), Application Visibility and Control, Performance Routing, broadband aggregation, Cisco Unified Border Element (SP Edition), and Cisco Unified Border Element (Enterprise Edition). Additionally, Cisco ASR 1000 offers feature rich scalable Data Center Interconnect (DCI) solutions that include Overlay Transport Virtualization (OTV) and Virtual Private Label Switching (VPL) to connect geographically dispersed data centers. Advanced routing techniques like Locator Identity Separation Protocol (LISP) allow host mobility within and across subnets. With separation of the control and data planes in the Cisco ASR 1000 Series Router architecture, software redundancy (on the Cisco ASR 1001, ASR 1001-X, ASR 1002, ASR 1002-X, and ASR 1004 Routers), and hardware redundancy (on the Cisco ASR 1006 and ASR 1013 Routers), the Cisco ASR 1000 Series is highly reliable and demonstrates a consistently high throughput, even when new services are added. Additionally, the modular Cisco IOS XE that is introduced with the Cisco ASR 1000 Series facilitates In-Service Upgrade (ISSU) on the ASR 1006 and ASR 1013 models. Getting Started To ensure that you order the correct Cisco ASR 1000, you must first know the answers to the following questions: 1. Is this deployment for a service provider or an enterprise network? 2. Is there a form factor requirement? How many rack units (RUs) are required? 3. What is the total throughput needed in the router? 4. Is hardware or software redundancy required? 5. What types of interfaces are needed and how many? 6. What services are to be enabled and how many services are required to be run concurrently? 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 70

Cisco ASR 1000 Series High-Level Overview and Part Numbers This section gives a brief overview of the Cisco ASR 1000 Series Router components. Chassis The chassis houses all of the router components. Processor Modules Route Processors: Route processors provide advanced routing features and also monitor and manage other resources on the Cisco ASR 1000. They comprise the memory, hard disk, and USB flash memory token. Embedded Services Processor (ESP): Based on the Cisco QuantumFlow Processor (QFP), the ESP performs forwarding, network security, deep packet inspection, firewalling, data center interconnect, and many other advanced features. Interfaces and Modules Shared Port Adapters (SPAs): These media modules connect to a variety of service provider and enterprise media types. All SPAs connect to the Cisco ASR 1000 Series Routers through the SPA interface processor (SIP) modules. SPA Interface Processors (SIPs): The SIPs house and interconnect up to 4 SPAs each, depending on the router model. Ethernet Line Cards (ELCs): ELCs come in two different types: 2x10G and 20x1G and 6x10G. Both of these Ethernet Line cards have built-in SIP. Cisco IOS XE Images feature licenses are required to turn on services on Cisco ASR 1000 Series Routers. Currently, two types of feature licenses are available. Certain services require only a right-to-use (RTU) license, whereas other services require both a RTU license and one or more number-of-sessions licenses. All the licenses on the Cisco ASR 1000 Series are honor-based and are not enforced through a product activation key (PAK). For fixed platforms ASR 1001, ASR 1001-X, and ASR 1002-X, one of the following five packages is required: Cisco ASR 1001 IOS XE UNIVERSAL - NO ENCRYPTION Cisco ASR 1001 IOS XE UNIVERSAL - NO PAYLOAD ENCRYPTION Cisco ASR 1001 IOS XE UNIVERSAL Cisco ASR 1001 IOS XE UNIVERSAL without Lawful Intercept Cisco ASR 1001 IOS XE UNIVERSAL - NO PAYLOAD ENCRYPTION without Lawful Intercept For fixed platforms ASR 1001, ASR 1001-X, and ASR 1002-X, to enable a set of required features, one of the following three Technology Packages is required: Cisco ASR 1000 IP BASE License Cisco ASR 1000 Advanced IP Services License Cisco ASR 1000 Advanced Services License 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 70

For modular platforms ASR 1002, ASR 1004, ASR 1006, and ASR1013, you can choose from six supported consolidated packages in each Cisco IOS XE release: IP Base without Crypto IP Base Advanced IP Services Advanced IP Services without Crypto Advanced IP Services without Lawful Intercept Advanced Enterprise Services Advanced Enterprise Services without Crypto Advanced Enterprise Services without Lawful Intercept Cisco IOS XE Feature Licenses Certain functions supported on the Cisco ASR 1000 Series require feature licenses. All Cisco ASR 1000 feature and performance upgrade licenses are honor-based; that is, they are not enforced through a PAK (Product Activation Key). Note: Prior to Cisco IOS XE Release 3.7S, performance upgrade licenses that are required to upgrade the Cisco ASR 1001 from 2.5 to 5 Gbps or the Cisco ASR 1002-X from 5 to 10 to 20 to 36 Gbps are enforced through a PAK. Similarly, prior to Cisco IOS XE Release 3.6S, technology package licenses are enforced through a PAK. Cisco ASR1000 Application Part Numbers When ordering a Cisco ASR 1000 Series Router, please choose the Application Part Number from Table 1 that most closely matches the type of deployment for the Cisco ASR 1000 Series Router. Note: Although a selection must be made, the choice of Application Part Number has no effect on the Cisco ASR 1000 Series Routers. This part number is only used for Cisco internal tracking purposes in order to better understand the customer use cases for the platform. Table 1. Application Part Number Application Name ASR1000 BNG/LNS ASR1000 DCI - including LISP, OTV, VXLAN, VPLS, etc. ASR1000 Internet Edge/Peering - including BGP/NAT/ZBFW ASR1000 Multi-Service Edge - including MPLS, L2/L3VPN ASR1000 Managed Services ASR1000 Route Reflector ASR1000 SP WiFi ASR1000 WAN Aggregation - with or without Encryption ASR1000 Other Part Number ASR1K-BB ASR1K-DCI ASR1K-INTERNET ASR1K-MSE ASR1K-MSP ASR1K-RR ASR1K-SP-WIFI ASR1K-WAN-AGGR ASR1K-OTHER 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 70

Table 2 lists system part numbers for chassis, route processors, ESPs, SIPs, and SPAs. Table 2. Chassis, Route Processor, ESP, SIP, and SPA Part Numbers Chassis Name Cisco ASR 1001 Cisco ASR 1001-X Cisco ASR 1002 Modular Cisco ASR 1002-X Cisco ASR 1004 Cisco ASR 1006 Cisco ASR 1013 Route Processors (RP) Route Processor 1 Route Processor 2 Embedded Services Processors (ESP) ESP5, 5 Gbps ESP10, 10 Gbps ESP10-N (non-encryption), 10 Gbps ESP20, 20 Gbps ESP40, 40 Gbps ESP100, 100 Gbps ESP200, 200 Gbps SPA Interface Processors (SIP) and Ethernet Line Cards SIP10, 10 Gbps SIP40, 40 Gbps Fixed Ethernet Line Card, 6x10GE Fixed Ethernet Line Card, 2x10GE + 20x1GE Shared Port Adapters (SPA) 8-port Channelized T1/E1 to DS0 4-port Channelized T3 to DS0 2-port Channelized T3 to DS0 2-port Clear Channel T3/E3 h4-port Clear Channel T3/E3 Cisco 4-Port Fast Ethernet (TX) Cisco 8-Port Fast Ethernet (TX) Cisco 2-Port Gigabit Ethernet Cisco 5-Port Gigabit Ethernet Cisco 8-Port Gigabit Ethernet Cisco 10-Port Gigabit Ethernet Cisco 1-Port 10GE LAN-PHY 2-port OC3/STM1 POS 4-port OC3/STM1 POS 1-port OC12/STM4 POS Cisco 4 port serial SPA Part Number ASR1001 ASR1001-X ASR1002 ASR1002-X ASR1004 ASR1006 ASR1013 ASR1000-RP1 ASR1000-RP2 ASR1000-ESP5 ASR1000-ESP10 ASR1000-ESP10-N ASR1000-ESP20 ASR1000-ESP40 ASR1000-ESP100 ASR1000-ESP200 ASR1000-SIP10 ASR1000-SIP40 ASR1000-6TGE ASR1000-2T+20X1GE SPA-8XCHT1/E1 SPA-4XCT3/DS0 SPA-2XCT3/DS0 SPA-2XT3/E3 SPA-4XT3/E3 SPA-4X1FE-TX-V2 SPA-8X1FE-TX-V2 SPA-2X1GE-V2 SPA-5X1GE-V2 SPA-8X1GE-V2 SPA-10X1GE-V2 SPA-1X10GE-L-V2 SPA-2XOC3-POS-V2 SPA-4XOC3-POS-V2 SPA-1XOC12-POS-V2 SPA-4XT-SERIAL 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 70

Shared Port Adapters (SPA) 1-port Channelized STM-1/OC-3c to DS0 SPA-1XCHSTM1/OC3 2-port OC48/STM16 POS/RPR SPA-2XOC48POS/RPR 4-port OC48/STM16 POS/RPR SPA-4XOC48POS/RPR Cisco SPA, WebEx Node SPA-WMA-K9 1 port OC-3c/STM-1 ATM SPA-1XOC3-ATM-V2 3 port OC-3c/STM-1 ATM SPA-3XOC3-ATM-V2 1-port OC48/STM16 POS/RPR SPA-1XOC48POS/RPR 2-port OC12/STM4 POS SPA-2XOC12-POS 4-port OC-12/STM-4 POS SPA-4XOC12-POS 8-port OC12/STM4 POS SPA-8XOC12-POS 8-port OC-3/STM-1 POS SPA-8XOC3-POS 1-port OC192/STM64 POS/RPR XFP Optics SPA-OC192POS-XFP 1 port OC12 STM SPA-1XOC12-ATM-V2 Synchronous Ethernet SPA-2X1GE-SYNCE Digital Signal Processor SPA-DSP 1-port Channelized OC12 to DS0 SPA-1XCHOC12/DS0 Cisco 1-port 10GE LAN/WAN-PHY SPA-1X10GE-WL-V2 1 Port Channelized OC3/STM-1 ATM and Circuit Emulation SPA-1CHOC3-CE-ATM 2 Port Channelized T3/E3 ATM and Circuit Emulation SPA-2CHT3-CE-ATM 24 Port Channelized T1/E1/J1 ATM and Circuit Emulation SPA-24CHT1-CE-ATM Cisco ASR 1000 Series Router This section discusses Cisco ASR 1000 hardware rules, including the default and maximum values for chassis, modules, power supplies, and accessories. Chassis Cisco ASR 1000 Series Routers have five form factors (1RU, 2RU, 4RU, 6RU, and 13RU). Table 3 lists the Rack- Unit (RU) height for the Cisco ASR 1000 chassis. Table 3. Cisco ASR 1000 Chassis Rack-Unit Sizes Form Factor Chassis Part Number Rack Units (RU) ASR1001 1 ASR1001-X 1 ASR1002 2 ASR1002-X 2 ASR1004 4 ASR1006 6 ASR1013 13 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 70

Embedded Services Processor Depending on the Cisco ASR 1000 Series model, the ESP is either integrated into the chassis or modular. Depending on the overall throughput or encryption performance needed, you can choose among eight different modular ESP versions: 2.5-, 5-, 10-, 10-N-, 20-, 40-, 100-, and 200-Gbps ESPs. Table 4 lists relevant ESP specifics. Table 4. ESP Specifics ESP Specifics Chassis Part Number Bandwidth Max ESP ESP-2.5 ESP-5 ESP-10 ESP-10-N ESP-20 ESP-40 ESP-100 ESP-200 ASR1001 2.5, upgradable to 5 Gbps ASR1001-X 2.5, upgradable to 5, 10 or 20 Gbps 1 Integrated Integrated 1 ASR1002 5-10 Gbps 1 Integrated Module Module ASR1002-X ** 5, upgradable to 10, 20, or 36 Gbps 1 ASR1004 10-40 Gbps 1 Module Module Module Module ASR1006 10-100 Gbps 2: Redundant Module Module Module Module Module ASR1013 40-200 Gbps 2: Redundant Module Module Module * You can upgrade the Cisco ASR 1001 throughput from 2.5 to 5 Gbps by purchasing one of the following licenses: system paper license: FLS-ASR1001-5G; spare paper license; and electronic license: L-FLS-ASR1001-5G=. ** ASR1001-X and ASR1002-X have their own built-in ESP; you can upgrade the Cisco ASR1001-X throughput from 2.5 to 5, 10, or 20 Gbps or the Cisco ASR1002-X throughput from 5 to 10, 20, or 36 Gbps by purchasing one of the following licenses: Part Number Description FLSA1-1X-2.5-5G Upgrade from 2.5 Gbps to 5 Gbps License for ASR 1001-X FLSA1-1X-2.5-5G= Upgrade from 2.5 Gbps to 5 Gbps Paper PAK for ASR 1001-X L-FLSA1-1X-2.5-5G= Upgrade from 2.5 Gbps to 5 Gbps E-Deliver PAK for ASR 1001-X FLSA1-1X-2.5-10G Upgrade from 2.5 Gbps to 10 Gbps License for ASR 1001-X FLSA1-1X-2.5-10G= Upgrade from 2.5 Gbps to 10 Gbps Paper PAK for ASR 1001-X L-FLSA1-1X-2.5-10G= Upgrade from 2.5 Gbps to 10 Gbps E-Deliver PAK for ASR 1001-X FLSA1-1X-2.5-20G Upgrade from 2.5 Gbps to 20 Gbps License for ASR 1001-X FLSA1-1X-2.5-20G= Upgrade from 2.5 Gbps to 20 Gbps Paper PAK for ASR 1001-X L-FLSA1-1X-2.5-20G= Upgrade from 2.5 Gbps to 20 Gbps E-Deliver PAK for ASR 1001-X FLSA1-1X-5-10G Upgrade from 5 Gbps to 10 Gbps License for ASR 1001-X FLSA1-1X-5-10G= Upgrade from 5 Gbps to 10 Gbps Paper PAK for ASR 1001-X L-FLSA1-1X-5-10G= Upgrade from 5 Gbps to 10 Gbps E-Deliver PAK for ASR 1001-X FLSA1-1X-5-20G Upgrade from 5 Gbps to 20 Gbps License for ASR 1001-X FLSA1-1X-5-20G= Upgrade from 5 Gbps to 20 Gbps Paper PAK for ASR 1001-X L-FLSA1-1X-5-20G= Upgrade from 5 Gbps to 20 Gbps E-Deliver PAK for ASR 1001-X FLSA1-1X-10-20G Upgrade from 10 Gbps to 20 Gbps License for ASR 1001-X FLSA1-1X-10-20G= Upgrade from 10 Gbps to 20 Gbps Paper PAK for ASR 1001-X L-FLSA1-1X-10-20G= Upgrade from 10 Gbps to 20 Gbps E-Deliver PAK for ASR 1001-X 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 70

Part Number Description FLSA1-2X-5-10G Upgrade from 5 Gbps to 10 Gbps License for ASR 1002-X FLSA1-2X-5-10G= Upgrade from 5 Gbps to 10 Gbps Paper PAK for ASR 1002-X L-FLSA1-2X-5-10G= Upgrade from 5 Gbps to 10 Gbps E-Delivery PAK for ASR 1002-X FLSA1-2X-5-20G Upgrade from 5 Gbps to 20 Gbps License for ASR 1002-X FLSA1-2X-5-20G= Upgrade from 5 Gbps to 20 Gbps Paper PAK for ASR 1002-X L-FLSA1-2X-5-20G= Upgrade from 5 Gbps to 20 Gbps E-Delivery PAK for ASR 1002-X FLSA1-2X-5-36G Upgrade from 5 Gbps to 36 Gbps License for ASR 1002-X FLSA1-2X-5-36G= Upgrade from 5 Gbps to 36 Gbps Paper PAK for ASR 1002-X L-FLSA1-2X-5-36G= Upgrade from 5 Gbps to 36 Gbps E-Delivery PAK for ASR 1002-X FLSA1-2X-10-20G Upgrade from 10 Gbps to 20 Gbps License for ASR 1002-X FLSA1-2X-10-20G= Upgrade from 10 Gbps to 20 Gbps Paper PAK for ASR 1002-X L-FLSA1-2X-10-20G= Upgrade from 10 Gbps to 20 Gbps E-Delivery PAK for ASR 1002-X FLSA1-2X-10-36G Upgrade from 10 Gbps to 36 Gbps License for ASR 1002-X FLSA1-2X-10-36G= Upgrade from 10 Gbps to 36 Gbps Paper PAK for ASR 1002-X L-FLSA1-2X-10-36G= Upgrade from 10 Gbps to 36 Gbps E-Delivery PAK for ASR 1002-X FLSA1-2X-20-36G Upgrade from 20 Gbps to 36 Gbps License for ASR 1002-X FLSA1-2X-20-36G= Upgrade from 20 Gbps to 36 Gbps Paper PAK for ASR 1002-X L-FLSA1-2X-20-36G= Upgrade from 20 Gbps to 36 Gbps E-Delivery PAK for ASR 1002-X Release Information: The Cisco ASR 1001-X is supported on the following software release: Cisco ASR 1001-X support begins as of Cisco IOS XE Release 3.12S. The 200-Gbps ESP is supported only on the following software releases: Cisco ASR 1013 support begins as of Cisco IOS XE Release 3.10S. The 100-Gbps ESP is supported only on the following software releases: Cisco ASR 1006 and ASR 1013 support begins as of Cisco IOS XE Release 3.7S. The 40-Gbps ESP is supported only on the following software releases: Cisco ASR 1004 support begins as of Cisco IOS XE Release 3.2S. Cisco ASR 1006 and ASR 1013 support begins as of Cisco IOS XE Release 3.1S. Route Processor The disk drive on the route processor is used for storage purposes, such as for the Cisco IOS XE consolidated package, logs, and core dump files. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 9 of 70

Route Processor Types Route processors come in two main categories, integrated and modular. Depending on the chassis type, one or two can be running in a redundant mode. Table 5 lists relevant route processor specifics. Table 5. Route Processor Specifics RP Specifics Chassis Part Number Max Number of RPs ASR1001 RP ASR1002-X RP RP1 RP2 ASR1001 1 Integrated * ASR1001-X 1 ASR1002 1 Integrated * ASR1002-X 1 Integrated * ASR1004 1 Module Module ASR1006 2 Module Module ASR1013 2 Module * Because the Cisco ASR 1001, ASR1001-X, ASR 1002-X, and ASR 1002 have integrated route processors, configuring or adding a separate route processor at the time of ordering is not necessary. Route Processor Memory and Storage When ordering a route processor module, please consider the following components: memory, storage device, and USB flash memory token. Table 6 lists relevant route processor memory and storage specifics. Table 6. Route Processor Memory and Storage Specifics RP Memory Chassis Part Number Default Memory Max Memory Default and Max Storage ASR1001 4G 16G 8G EUSB * ASR1001-X 8G 16G 8G EUSB * ASR1002 4G 4G 8G EUSB * ASR1002-X 4G 16G 8G EUSB * ASR1004 RP1/RP1-N 4G, RP1-N, RP2 8G RP1/RP1-N 4G, RP2 16G RP1/RP1-N 40GB; 1G EUSB: RP2 80 GB; 1G EUSB ** ASR1006 RP1/RP1-N 4G, RP1-N, RP2 8G RP1/RP1-N 4G, RP2 16G RP1/RP1-N 40GB; 1G EUSB: RP2 80 GB; 1G EUSB ** ASR1013 RP2 8G RP2 16G RP2 80 GB; 1G EUSB** * There is no hard disk on the Cisco ASR 1001 and ASR 1002. Instead, the integrated Route Processors on the Cisco ASR 1001 and ASR 1002 come with an 8-GB embedded USB (EUSB) flash drive for mass storage and for booting images. This EUSB is not field-replaceable. ASR 1002-X also comes with an 8-GB embedded USG (EUSB) flash drive; in addition, ASR 1002-X has an optional 160-GB Hard-Disk Drive (HDD), orderable with part number MASR1002X-HD-160G or MASR1002X-HD-160G=. ** The RP1/RP1-N module comes with a 1-GB EUSB flash drive, which is field-replaceable (part number M-ASR1K-EUSB-1GB=). The RP2 module comes with a 2-GB EUSB flash drive, which is field-replaceable (part number M-ASR1K-EUSB-2GB=). Release Information: Maximum DRAM increased on Cisco ASR 1001 from 8 to 16 Gbps as of Cisco IOS XE Release 3.3S. As of Cisco IOS XE Release 3.3S, the Cisco ASR 1004, ASR 1006, and ASR 1013 Routers can be booted from the hard disk drive that is on the RP1 or RP2 module. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 10 of 70

Note: All of the Cisco ASR 1000 spare route processors (ASR1000-RP1= and ASR1000-RP2=) and the route processors in spare chassis orders (ASR1001= and ASR1002=) are not configurable at the time of order, and they ship without any software. Note: For Internet Peering/Edge and Route Reflector deployments, it is highly recommended to configure the Cisco ASR 1001 or ASR 1002-X with 8G of shared memory instead of the default 4G of shared memory. The Cisco ASR 1001-X comes with 8G of shared memory as a default. Route Processor Redundancy The Cisco ASR 1000 is a highly redundant router; the type of redundancy depends on the model. Table 7 lists relevant route processor memory redundancy requirements. Table 7. Memory Requirements for Route Processor Redundancy Redundancy Requirements Chassis Part Number Inbox Redundancy Type Default Memory Minimum Memory for Redundancy Redundancy Feature License ASR1001 SW No ISSU * 4G 8G FLSASR1-IOSRED(=) or L-FLSASR1-IOSRED= ASR1001-X SW No ISSU * 8G 8G FLSASR1-IOSRED(=) or L-FLSASR1-IOSRED= ASR1002 SW No ISSU * 4G 4G FLASR1-IOSRED-RTU(=) ASR1002-X SW No ISSU * 4G 8G FLSASR1-IOSRED(=) or L-FLSASR1-IOSRED= ASR1004 SW No ISSU * RP1/RP1-N 4G, RP1-N, RP2 8G ASR1006 HW ISSU ** RP1/RP1-N 4G, RP1-N, RP2 8G RP1/RP1-N 4G, RP2 8G RP1/RP1-N 4G, RP2 8G FLASR1-IOSRED-RTU(=) N/A ASR1013 HW ISSU ** RP2 8G RP2 8G N/A * Supports dual Cisco IOS redundancy. ** Supports hardware route processor and ESP redundancies, but does not support software redundancy. USB Flash Memory Token You can order a 1-GB USB flash memory token (MEMUSB-1024FT) separately for Cisco ASR 1000 Series Routers to store configurations or Cisco IOS XE consolidated packages. Ports and Media Interface Modules: SIP and SPA The media port adapter SPAs are housed by the SIP modules. The maximum number of SPA modules depends on both the type and number of SIPs supported by each router. SPA cards on the same SIP card do not need to be of the same type. Please refer to the Cisco ASR 1000 Series Shared Port Adapter Support data sheet for details about supported SPAs. Certain routers have built-in Gigabit Ethernet ports. These built-in ports require Small Form-Factor Pluggable (SFP) optic or copper media. An SFP is a hot-swappable input/output device that plugs into a Gigabit Ethernet port, linking the port with the network. You can order the SFP at the same time you order the SPAs or later as a spare. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 11 of 70

Table 8 lists relevant SIP and SPA specifics. Table 8. SIP and SPA Specifics Chassis Part Number SIPS, SPAs, and Port Specifics Max SPA Slots Max NIM Slots Max SIP SIP10 SIP40 Built in GE/SFP ASR1001 1 N/A N/A Integrated 4 ASR1001-X 1 1 N/A N/A Integrated 6 2 ASR1002 3 N/A N/A Integrated 4 ASR1002-X 3 N/A N.A Integrated 6 ASR1004 8 N/A 2 Module N/A ASR1006 12 N/A 3 Module N/A ASR1013 24 N/A 6 Module N/A Built in 10GE/SFP+ Release Information: The Cisco ASR 1000 Series 40-Gbps SIP (ASR1000-SIP40) is supported on the following routers: Cisco ASR 1004 as of Cisco IOS XE Release 3.2S Cisco ASR 1006 and 1013 as of Cisco IOS XE Release 3.1S Power Supplies All Cisco ASR 1000 chassis come by default with either dual AC or dual DC power supplies. At the time of ordering, you can choose between dual AC and dual DC power supplies. AC and DC in the same chassis is not supported. Table 9 lists relevant power-supply specifics. Table 9. Power-Supply Specifics Power Supplies Chassis Part Number Default Number Max Number AC DC Mix of AC And DC ASR1001 2: Redundant 2: Redundant Yes Yes No ASR1001-X 2: Redundant 2: Redundant Yes Yes No ASR1002 2: Redundant 2: Redundant Yes Yes No ASR1002-X 2: Redundant 2: Redundant Yes Yes No ASR1004 2: Redundant 2: Redundant Yes Yes No ASR1006 2: Redundant 2: Redundant Yes Yes No ASR1013 4: 2 redundant pairs 4: 2 redundant pairs Yes Yes No Note: The dual power supplies for a spare chassis are optional, and they must either be configured with the spare chassis or ordered separately as power-supply spares. Accessories Every router chassis comes by default with an accessory kit. The accessory kit for a spare chassis is optional, and you must configure the spare chassis with it at the time of purchase or order it separately as a spare. The Cisco ASR 1000 accessory kit comes as a default on all Cisco ASR 1000 models and can be bought as a spare. The Federal Information Processing Standards (FIPS) kits are sold only as spares. FIPS140-2 requires that routers have tamper-evident labels affixed across all removable component seams. In addition to tamper-evident labels, FIPS specifies that the view of internal components where cryptography is processed must be obscured. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 12 of 70

Table 10 lists the accessories that come with the routers. Table 10. Accessories Accessories Description Cisco ASR 1006 Accessory Kit, Spare Cisco ASR 1004 Accessory Kit, Spare Cisco ASR 1002 Accessory Kit, Spare Cisco ASR 1001-X Accessory Kit Cisco ASR 1001-X Accessory Kit, Spare NIM Carrier Card for SSD Drives NIM Carrier Card for SSD Drives, Spare Blank faceplate for NIM slot on Cisco ISR 4400 * Cisco ASR 1006 FIPS Opacity Kit Cisco ASR 1004 FIPS Opacity Kit Cisco ASR 1002 FIPS Opacity Kit Cisco ASR 1001 Accessory Kit, Spare Cisco ASR 1001 FIPS Opacity Kit, Spare Cisco ASR 1013 Accessory Kit, Spare Cisco ASR 1013 Accessory Kit Cisco ASR 1001 Accessory Kit Blank Cover ASR 1000 SIP, Spare Blank Cover for ASR 1000 ESP, spare Blank Cover for ASR 1000 RP, spare Blank Cover for regular SPA Cisco ASR 1002-X Accessory Kit Cisco ASR 1002-X Accessory Kit, Spare Blank Cover for ASR 1002-X HDD Blank Cover for ASR 1002-X HDD, Spare Part Number ASR1006-ACS= ASR1004-ACS= ASR1002-ACS= ASR1001X-ACS ASR1001X-ACS= NIM-SSD NIM-SSD= NIM-BLANK= ASR1006-FIPS-KIT= ASR1004-FIPS-KIT= ASR1002-FIPS-KIT= ASR1001-ACS= ASR1001-FIPS-KIT= ASR1013-ACS= ASR1013-ACS ASR1001-ACS ASR1000-SIP-BLANK= ASR1000-ESP-BLANK= ASR1000-RP-BLANK= SPA-BLANK= ASR1002X-ACS ASR1002X-ACS= ASR1002X-HD-BLANK ASR1002X-HD-BLANK= Note: * NIM-BLANK= (spare) is the same hardware component/product identified supported on Cisco ASR1001- X and Cisco 4451-X Integrated Services Router. Note: Please note that Cisco ASR 1001-X NIM support will come post FCS. Ordering Cisco ASR 1000 Series Router : Cisco ASR 1000 RP1 and RP2 Twelve consolidated packages are provided in each Cisco IOS XE release starting with Cisco IOS XE Release 2.3. The same set of six consolidated packages is available for RP1 (the RP1 module or the integrated RP1 on Cisco ASR 1002 Routers) in a 32-bit version and for RP2 in a 64-bit version. The six consolidated packages (six for RP1 and six for RP2) follow: IP Base without crypto IP Base Advanced IP Services without crypto Advanced IP Services 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 13 of 70

Advanced Enterprise Services without crypto Advanced Enterprise Services Note: For managed service providers, software part numbers (part number ends with...-ms ) that default to the latest shipping release for the respective software image are in place. For the Cisco ASR 1001, ASR1001-X, and ASR 1002-X, the concept of universal images is introduced as well as three different technology package licenses (IP Base, Advanced IP Services, and Advanced Enterprise Services) to enable the respective feature sets. Please refer to the section Ordering Cisco ASR 1000 Series Router : Cisco ASR 1001, ASR 1001-X, and ASR 1002-X, in particular Tables 11, 12, and 13). Table 11 describes the Cisco IOS XE consolidated packages for the Cisco ASR 1000 RP1 and RP2. Table 11. Cisco IOS XE Consolidated Packages for Cisco ASR 1000 RP1 and RP2 Cisco IOS XE Consolidated Packages Cisco ASR 1000 Series RP1 IP Base w/o crypto Cisco ASR 1000 Series RP2 IP Base w/o crypto Cisco ASR 1000 Series RP1 IP Base Cisco ASR 1000 Series RP2 IP Base Cisco ASR 1000 Series RP1 Advanced IP Services w/o crypto Cisco ASR 1000 Series RP2 Advanced IP Services w/o crypto Cisco ASR 1000 Series RP1 Advanced IP Services Cisco ASR 1000 Series RP2 Advanced IP Services Cisco ASR 1000 Series RP1 Advanced IP Services W/O LI Cisco ASR 1000 Series RP2 Advanced IP Services W/O LI Cisco ASR 1000 Series RP1 Advanced Enterprise Services w/o crypto Cisco ASR 1000 Series RP2 Advanced Enterprise Services w/o crypto Image Type Part Number Description 32-bit (RP1) SASR1R1-IPB Offers low-cost base image Offers only basic IP feature support 64-bit (RP2) SASR1R2-IPB Satisfies export requirements for non-cryptographic software 32-bit (RP1) SASR1R1-IPBK9 Offers low-cost base image Offers only basic IP feature support, including Secure Shell (SSH) 64-bit (RP2) SASR1R2-IPBK9 protocol support 32-bit (RP1) SASR1R1-AIS Targeted for export restricted customers Targeted for service provider customers 64-bit (RP2) SASR1R2-AIS Supports all features, including Lawful Intercept, and CUBE (SP Edition) and CUBE (Enterprise Edition) (SBC (Session Border Controller) functions) Does not include support for legacy protocols Does not support encryption (SSH, IP Security [IPsec], Digital Encryption Standard [DES], Triple Digital Encryption Standard [3DES], and Advanced Encryption Standard [AES]) 32-bit (RP1) SASR1R1-AISK9 * Targeted for service provider customers Supports all features, including encryption (SSH, IPsec, 1 DES, 64-bit (RP2) SASR1R2-AISK9 3DES, AES, Lawful Intercept, CUBE (SP Edition), and CUBE (Enterprise Edition) - (SBC (Session Border Controller) functions) Does not include support for traditional protocols 32-bit (RP1) 64-bit (RP2) SASR1R1AIS9NLI SASR1R2AIS9NLI Targeted for service provider customers Supports all features, including encryption (SSH, IPsec, 1 DES, 3DES, AES, Lawful Intercept, CUBE (SP Edition), and CUBE (Enterprise Edition) - (SBC (Session Border Controller) functions) Does not include support for legacy protocols Without Lawful Intercept 32-bit (RP1) SASR1R1-AES Targeted for export restricted customers Supports all features, including Lawful Intercept, and CUBE (SP Edition) and CUBE (Enterprise Edition) (SBC (Session Border 64-bit (RP2) SASR1R2-AES Controller) functions), as well as traditional protocols Does not support encryption (SSH, IPsec DES, 3DES, and AES) 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 14 of 70

Cisco IOS XE Consolidated Packages Cisco ASR 1000 Series RP1 Advanced Enterprise Services Cisco ASR 1000 Series RP2 Advanced Enterprise Services Cisco ASR 1000 Series RP1 Advanced Enterprise Services W/O LI Cisco ASR 1000 Series RP2 Advanced Enterprise Services W/O LI Image Type Part Number Description 32-bit (RP1) SASR1R1-AESK9 Targeted for enterprise customers Supports all features, including encryption (SSH, IPsec DES, 64-bit (RP2) SASR1R2-AESK9 3DES and AES), Lawful Intercept, and CUBE (SP Edition) and CUBE (Enterprise Edition) (SBC (Session Border Controller) Functions), as well as traditional protocols 32-bit (RP1) SASR1R1AES9NLI Targeted for enterprise customers Supports all features, including encryption (SSH, IPsec DES, 3DES and AES), Lawful Intercept, and CUBE (SP Edition) and 64-bit (RP2) SASR1R2AES9NLI CUBE (Enterprise Edition) (SBC (Session Border Controller) Functions), as well as traditional protocols Without Lawful Intercept * The K9 consolidated packages include software developed by Cavium Networks. For more details about these images, please refer to the Cisco IOS packaging product bulletin at: http://cisco.com/en/us/products/sw/iosswrel/ps5460/prod_bulletin0900aecd80281b17.html. For information about Cisco IOS XE, please refer to Cisco IOS XE for Cisco ASR 1000 Series Routers at: http://www.cisco.com/en/us/products/ps9343/prod_bulletins_list.html. Service provider or enterprise: In general, one should apply the following rules: If you have Cisco ASR 1000 Series Routers deployed in your enterprise environment, you should order the Advanced Enterprise Services consolidated package. If one Cisco ASR 1000 Series Router is deployed in your service provider environment, you should order the Advanced IP Services consolidated package. The Advanced IP Services RP1 and RP2 consolidated packages and the Advanced IP Services technology package feature license (for the Cisco ASR 1001) do not support traditional protocols (for example, DECnet and AppleTalk), whereas the Advanced Enterprise Services version does. Ordering Cisco ASR 1000 Series Router : Cisco ASR 1001, ASR 1001-X, and ASR 1002-X With the Cisco ASR 1001, ASR 1001-X, and ASR 1002-X, the concept of a universal software image in combination with a technology package license to enforce a certain feature set by software activation, that is, with a PAK, has been introduced. However, for ASR 1001, as of Cisco IOS XE Release 3.6S, technology package licenses, and as of 3.7S, performance upgrade license to upgrade from 2.5 to 5 Gbps, are both honorbased. For ASR1001-X and ASR 1002-X, both technology package licenses and performance upgrade licenses are honor-based. In summary: A PAK or license key enforces two types of licenses on the Cisco ASR 1001 prior to Cisco IOS XE Release 3.6S: Technology package licenses (feature set licenses); part numbers and descriptions follow: SLASR1-IPB: Cisco ASR 1000 IP Base license SLASR1-AIS: Cisco ASR 1000 Advanced IP Services license SLASR1-AES: Cisco ASR 1000 Advanced Enterprise Services license Performance Upgrade license; part number FLS-ASR1001-5G to upgrade from 2.5 to 5 Gbps. To enable a certain feature set on the Cisco ASR 1001, ASR 1001-X, or ASR 1002-X, you must order a universal image in combination with a technology package license. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 15 of 70

Note: As of Cisco IOS XE Release 3.7S, the technology package licenses, the performance upgrade licenses, and all other licenses required for certain features on the Cisco ASR 1001, ASR 1001-X, and ASR 1002- X are not enforced. Table 12 lists the part numbers you must purchase to enable feature sets; Table 13 lists the part numbers for universal Cisco IOS XE consolidated packages with an integrated route processor; and Table 14 gives part numbers for the technology package licenses for the Cisco ASR 1001, ASR 1001-X, and ASR 1002-X. Table 12. Part Numbers for Cisco ASR 1001, ASR 1001-X, and ASR 1002-X Feature Set Enablement For the Equivalent Feature Set on ASR 1000 Series (Cisco ASR 1002/ASR1004/ASR1006/ASR1013) To Order Universal Image Part Number With Technology Package License Part Number IP Base without crypto (IPB) SASR1001U/SASR1K2XU SLASR1-IPB IP Base (IPBK9) SASR1001NPEK9/SASR1K2XNPEK9 SLASR1-IPB IP Base (IPBK9) W/O LI SASR1001NP9NLI/SASR1K2XNP9NLI SLASR1-IPB Advanced IP Services without crypto (AIS) SASR1001U//SASR1K2XU SLASR1-AIS Advanced IP Services (AISK9) SASR1001UK9/SASR1K2XUK9 SLASR1-AIS Advanced IP Services (AISK9) W/O LI SASR1001UK9NLI/SASR1K2XUK9NLI SLASR1-AIS Advanced Enterprise Services without crypto (AES) SASR1001U/SASR1K2XU SLASR1-AES Advanced Enterprise Services (AESK9) SASR1001UK9/SASR1K2XUK9 SLASR1-AES Advanced Enterprise Services (AESK9) W/O LI SASR1001UK9NLI/SASR1K2XUK9NLI SLASR1-AES Table 13. Descriptions of Universal Cisco IOS XE Consolidated Packages for Cisco ASR 1001, ASR 1001-X, and ASR 1002-X with an Integrated Route Processor Cisco IOS XE Consolidated Package Cisco IOS XE UNIVERSAL ASR1001/ASR 1002-X Cisco IOS XE - NO PAYLOAD ENCRYPTION UNIVERSAL ASR1001/ASR 1002-X Cisco IOS XE - NO PAYLOAD ENCRYPTION UNIVERSAL W/O LI ASR1001/ASR 1002-X Cisco IOS XE - ENCRYPTION UNIVERSAL ASR1001/ASR 1002-X Cisco IOS XE - ENCRYPTION UNIVERSAL W/O LI ASR1001/ASR 1002-X Part Number SASR1001U/SASR1K2XU SASR1001NPEK9/SASR1K2XNPEK9 SASR1001NP9NLI/SASR1K2XNP9NLI SASR1001UK9/SASR1k2XUK9 SASR1001UK9NLI/SASR1k2XUK9NLI Description Provides low-cost base consolidated package Offers only basic IP feature support - in combination with IPB Technology Package License Satisfies export requirements for noncryptographic software Provides low-cost base consolidated package Offers only basic IP feature support, including Secure Shell (SSH) Protocol and Simple Network Management Protocol Version 3 (SNMPv3) support - in combination with IPB Technology Package License Provides low-cost base consolidated package Offers only basic IP feature support, including Secure Shell (SSH) Protocol and Simple Network Management Protocol Version 3 (SNMPv3) support - in combination with IPB Technology Package License Without Lawful Intercept Supports all features, including encryption (IPsec, Triple Digital Encryption Standard [3DES], Advanced Encryption Standard [AES], and SSH), Lawful Intercept, and SBC as well as older protocols - in combination with AIS or AES Technology Package License (with AES Technology Package License, older protocols are supported, e.g. DECnet, AppleTalk, etc.) Supports all features, including encryption (IPsec, Triple Digital Encryption Standard [3DES], Advanced Encryption Standard [AES], and SSH), Lawful Intercept, and SBC as well as older protocols - in combination with AIS or AES Technology Package License (with AES Technology Package License, older protocols are supported, e.g. DECnet, AppleTalk, etc.) Without Lawful Intercept 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 16 of 70

Table 14. Descriptions of Cisco ASR 1001, ASR 1001-X, and ASR 1002-X Technology Package Licenses ASR1001 Technology Package Licenses SLASR1-IPB SLASR1-AIS SLASR1-AES SLASR1-IPB= L-SLASR1-IPB= SLASR1-IPB-AIS= SLASR1-IPB-AES= SLASR1-AIS-AES= L-SLASR1-IPB-AIS= L-SLASR1-IPB-AES= L-SLASR1-AIS-AES= Cisco ASR 1000 IP BASE License Cisco ASR 1000 Advanced IP Services License Cisco ASR 1000 Advanced Enterprise Services License Cisco ASR 1000 IP BASE Paper PAK Cisco ASR 1000 IP BASE E-Delivery PAK Cisco ASR 1000 IPB to AIS Upgrade Paper PAK Cisco ASR 1000 IPB to AES Upgrade Paper PAK Cisco ASR 1000 AIS to AES Upgrade Paper PAK Cisco ASR 1000 IPB to AIS Upgrade E-Delivery PAK Cisco ASR 1000 IPB to AES Upgrade E-Delivery PAK Cisco ASR 1000 AIS to AES Upgrade E-Delivery PAK Ordering Cisco ASR 1000 Series Router Feature Licenses feature licenses are required to turn on services on Cisco ASR 1000 Series Routers, in addition to the appropriate Cisco IOS XE as described in the previous section. Currently, two types of feature licenses are available. Certain services require only a right-to-use (RTU) license, whereas other services require both a RTU license and one or more number-of-sessions licenses. All the licenses on the Cisco ASR 1000 Series (with some exceptions for the Cisco ASR 1001 licenses prior to Cisco IOS XE Release 3.6S; refer to the section Ordering Cisco ASR 1001 Series Feature Licenses ) are honor-based; that is, the licenses are not enforced through a product activation or license key. Services that require only an RTU license include the following: IP Security (IPsec) service: The Cisco ASR 1000 Series Router IPsec application requires an RTU license (FLASR1-IPSEC-RTU(=), and FLSA1-2X-IPS4G(=) on ASR 1002-X), which allows you to enable IPsec Triple Digital Encryption Standard (3DES) and Advanced Encryption Standard (AES), Dynamic Multipoint VPN (DMVPN), and Easy VPN. Firewall service: The Cisco ASR 1000 Series Router Firewall application requires an RTU license (FLASR1-FW-RTU(=)), which allows you to enable Firewall Services at Layer 4. Additionally: To enable per-subscriber or user firewall in broadband and enterprise deployments, the firewall RTU license as well as the number-of-sessions licenses listed in the Broadband service bullet later in this list are required. Please refer to the Per-subscriber or -user firewall service bullet. Firewall or Network Address Translation (NAT) stateful interchassis redundancy: Enabling interchassis redundancy for firewall and NAT requires an RTU license (FLASR1-FWNAT-RED(=)) on any Cisco ASR 1000 Router that supports interchassis redundancy. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 17 of 70

Stateful Network Address Translation 64 (Stateful NAT64) service (available as of Cisco IOS XE Release 3.4S): The Cisco ASR 1000 Series Router NAT64 service helps solve the IPv4 exhaust problem, enables IPv6 adoption, and requires an RTU license (FLASR1-NAT64-2M (=)) that enables up to 2M translations depending on the selected ESP (for example, ESP20 or ESP40 supports 2M translations whereas ESP10 supports 1M). Stateless NAT64 service that is available as of Cisco IOS XE Release 3.2S does not require any license. Stateful NAT64 service is available as of Cisco IOS XE Release 3.4S. Carrier Grade Network Address Translation 44 (CGN) service (available as of Cisco IOS XE Release 3.6S): The Cisco ASR 1000 Series Router CGN is positioned between a private and public IP network and uses nonglobal, private IP addresses and a public IP address for translation. Carrier Grade NAT dynamically maps one or more private IP addresses into one or more public (globally routable) IP addresses that use Network Address and Port Translation (NAPT) techniques. Traditionally, NAT boxes are deployed in residential home gateways (HGWs) to translate multiple private IP addresses that are configured on multiple devices inside the home to a single public IP address that is configured and provisioned on the HGW by the service provider. Service providers deploy NAT in such a way that multiple subscribers can share a single global IP address. The Carrier Grade NAT scales to several millions of NAT translations, making it a Carrier Grade NAT (CGN). CGN on the Cisco ASR 1000 Series Router requires an RTU license (FLASR1-CGN-2M (=)) that enables up to 2M translations or (FLASR1-CGN-6M (=)) that enables up to 6M translations depending on the selected ESP. For hardware models that support more than 2M or 6M translations, you can order more than one licenses. For example, with the Cisco ASR 1000 ESP100, you can have up to 12M translations, so you can order 2 x FLASR1-CGN-6M(=) to give you RTU of up to 12M translations. You can configure CGN by using the ipnat settings mode cgn command. Use the ipnat settings mode default command to change to the default or traditional NAT operating mode. In the default mode, you do not need any license. In CGN mode, you will need one of the following part numbers: FLASR1-CGN-2M (=) or FLASR1-CGN-6M (=). Cisco IOS Flexible Packet Inspection (FPI) service: The Cisco ASR 1000 Series Router FPI application requires an RTU license (FLASR1-FPI-RTU(=)), which allows you to enable Flexible Packet Matching (FPM). As of Cisco IOS XE Release 3.4S, NBAR requires the Application Visibility and Control license and is no longer covered under the FPI license. Cisco Application Visibility and Control (AVC) (available as of Cisco IOS XE Release 3.4S): Cisco AVC provides a powerful pervasive, integrated service management solution based on stateful deep packet inspection (DPI). With Cisco AVC, instead of processing packets as individual events, the Cisco ASR 1000 Series Router fully reconstructs flows and the Layer 7 state of each application flow for application- and session-based classification and management of IP traffic. The Cisco ASR 1000 Series Router Application Visibility and Control RTU license (FLASR1-AVC- RTU(=)) enables you to configure NBAR and advanced application awareness on the Cisco ASR 1000 Series Routers or application reporting (visibility) and usage in application control in QoS policies. The Cisco ASR 1000 Series Router Application Visibility and Control Upgrade license (FLASR1-AVC- UPG(=)) enables you to upgrade from your current existing FPI license to the new advanced Application Visibility and Control (AVC) license. The Cisco Insight reporting RTU license ((FLASR1-NSIGHT-RTU(=)) is a complementary external software component to the Cisco ASR 1000 Series Router Application Visibility and Control RTU license - the Cisco Insight is an external web-based reporting tool that can be installed on any external generic server that complies to its prerequisites; the license is per Cisco ASR 1000 unit. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 18 of 70

Cisco IOS redundancy: The Cisco ASR 1000 Series Router software redundancy requires an RTU license (FLASR1-IOSRED-RTU(=) on ASR 1002, and FLSASR1-IOSRED(=) on ASR 1001, ASR 1001-X, and ASR 1002-X), which allows you to enable software redundancy on the Cisco ASR 1001, ASR 1002, ASR 1001-X, ASR 1002-X, and ASR 1004 chassis. redundancy requires 4-GB DRAM on the RP1, and 8-GB DRAM on ASR 1001 or ASR 1002-X. The Cisco ASR 1001, ASR 1002, and ASR 1002-X come by default with 4-GB DRAM on the built-in route processor, and the ASR 1001-X comes by default with 8-GB DRAM. Broadband and Service Provider Wi-Fi Service An RTU license must be ordered in order to enable Broadband, Service Provider Wi-Fi (SP Wi-Fi), Intelligent Services Gateway (ISG), and Intelligent Wireless Access Gateway (iwag) applications on the Cisco ASR 1000 Series Router. The FLASR1-BB-RTU(=) license will allow you to enable Broadband, SP Wi-Fi, ISG, and iwag applications for up to 500 sessions. To increase the number of sessions, you will need to order one or more number-of-sessions licenses. Part numbers for these licenses follow: FLASR1-BB-4K(=) FLASR1-BB-16K(=) FLASR1-BB-32K(=) FLASR1-BB-48K(=) FLASR1-BB-64K(=) For example, FLASR1-BB-4K(=) will allow you enable up to 4,000 sessions (+500 from RTU), whereas FLASR1- BB-64K(=) will allow you to enable up to 64,000 (+500 from RTU) sessions. You can combine multiple session licenses for the session count desired; for example, you can purchase two 4,000-session licenses for 8,000 additional sessions, and you can combine a 16,000-session license with a 4,000-session license for 20,000 additional sessions. The maximum number of sessions supported with a particular Cisco ASR1000 RP-ESP combination depends on the features enabled with those sessions. Please refer to the Broadband scaling document for further details: http://www.cisco.com/en/us/docs/routers/asr1000/configuration/guide/chassis/scaling_ps9343_tsd_produ cts_configuration_guide.html - wp1115111. Cisco ASR 1000 Broadband Bundles are created to provide ordering convenience. Depending on the number of users supported, you can choose the following bundles: Part number ASR1006-10G-B16/K9: Supports 16,000 sessions Part number ASR1006-10G-B24/K9: Supports 24,000 sessions Part number ASR1K6R2-20G-B32/K9: Supports 32,000 sessions For Cisco ASR 1000 Series bundles, please refer to the Cisco ASR 1000 Series Price List or contact your local Cisco representative LAC and LNS: For Layer 2 Tunneling Protocol access concentrator (LAC) and L2TP Network Server (LNS) functions, sessions are counted as the number of Point-to-Point Protocol (PPP) sessions. The numbers of Layer 2 Tunneling Protocol (L2TP) tunnels are not counted as sessions and do not require an additional license. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 19 of 70

L2TS: For L2TP Tunnel Switch (L2TS) functions, session licenses required are based on the number of L2TP tunnels being switched. For example, if the Cisco ASR 1000 Series Router is used to switch 8,000 L2TP tunnels, you must order two 4,000-session licenses (FLASR1-BB-4K(=)). ISG: The ISG feature set is covered under the Broadband RTU license. Session licenses apply similar to LAC and LNS based on PPP or IPoE sessions being enabled. PMIPv6 MAG: The PMIPv6 MAG feature set is covered under the Broadband RTU license. Session licenses are required in addition, based on the number of subscribers tunneled using PMIPv6. iwag: The iwag feature set is covered under the Broadband RTU license. Session licenses are required in addition, based on the number of subscribers supported by iwag. The number of tunnels coming in and out of the Cisco ASR 1000 as iwags are not counted toward the sessions or licenses. For example, if the Cisco ASR 1000 Series Router is aggregating 8,000 subscribers, then you must order two 4,000-session licenses (FLASR1-BB- 4K(=)). In cases where the ISG Walk-By subscriber management feature is used, the required session count is based only on the maximum number of active subscriber sessions being supported. Per-Subscriber Firewall: The Cisco ASR 1000 Series Router per-subscriber or per-user firewall service requires both an RTU license (FLA SR1-FW-RTU(=)) and one or more session licenses. Services that require only number-of-sessions licenses follow: Cisco Unified Border Element (SP Edition) service: Cisco Unified Border Element (SP Edition) is a highly scalable, carrier-grade SBC integrated into Cisco ASR 1000 Series Routers. Cisco Unified Border Element (SP Edition) licenses authorize the use of both distributed and unified SBC deployment models. For the purpose of session license ordering, an SBC session is a bidirectional media flow and associated signaling. A session represents a complete voice call through the SBC: two call legs consisting of two media legs for a bidirectional media flow and associated signaling on both call legs. A videophone call uses two sessions: one session for a bidirectional media flow and associated signaling (as in a voice call) and one more sessions for the second bidirectional media flow for video. An instant messaging session consists of signaling between two endpoints through the SBC; there is typically no associated media. You can combine multiple session licenses for the session count desired. Part numbers for these licenses follow: FLASR1-CUBES-250P(=) FLASR1-CUBES-2KP(=) FLASR1-CUBES-4KP(=) FLASR1-CUBES-16KP(=) FLASR1-CUBES-32KP(=) FLASR1-CUBES-LAB(=) FLASR1-CUBES-TPEX(=) When using an ACTIVE/STANDBY pair of routers, a single license for both is required for redundancy: CUBESP-250P-RED (=) CUBESP-2K-RED (=) 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 20 of 70